PHPackages                             utexas/utexas\_pantheon\_logs\_http - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [HTTP &amp; Networking](/categories/http)
4. /
5. utexas/utexas\_pantheon\_logs\_http

ActiveDrupal-custom-module[HTTP &amp; Networking](/categories/http)

utexas/utexas\_pantheon\_logs\_http
===================================

Client for the UTexas Pantheon Logs HTTP API.

2.1.1(1y ago)3149.7k—5.3%12GPL-2.0-or-laterPHP

Since Sep 24Pushed 3mo ago3 watchersCompare

[ Source](https://github.com/utdk/utexas_pantheon_logs_http)[ Packagist](https://packagist.org/packages/utexas/utexas_pantheon_logs_http)[ Docs](https://github.austin.utexas.edu/eis1-wcs/utexas_pantheon_logs_http)[ RSS](/packages/utexas-utexas-pantheon-logs-http/feed)WikiDiscussions develop Synced 1mo ago

READMEChangelogDependencies (2)Versions (11)Used By (2)

UTexas Pantheon Logs HTTP
=========================

[](#utexas-pantheon-logs-http)

> Provides JSON event pushing to Splunk Logs via the tag/http endpoint.

This module is based on the [Logs HTTP](https://www.drupal.org/project/logs_http) contrib module, which wass designed as a generalized solution for pushing Watchdog logs to an HTTP endpoint such as [Logstash](http://logstash.net/), or paid services such as [Loggly](loggly.com).

This custom fork adds needed functionality to allow Watchdog logs on a Pantheon-hosted site to be pushed to the [UT Austin Splunk instance](https://splunk.security.utexas.edu) via a [Splunk HTTP Event Collector (HEC)](https://dev.splunk.com/enterprise/docs/devtools/httpeventcollector/).

The HTTP connection code has been modified to meet the requirements of Pantheon's [Secure Integration](https://pantheon.io/docs/secure-integration) platform feature, which allows the messages to be sent over an existing secure tunnel between Pantheon and the UT Austin network.

This module also allows the use of a secure token which is required for connection to the Splunk HEC. See [(Splunk) HTTP Event Collector (HEC)](https://wikis.utexas.edu/pages/viewpage.action?pageId=196975636) for more information about HEC configuration.

The configuration that is provided, consists of variables which make the connection between Pantheon logs and Splunk, the variables are:

- **Endpoint**: The Splunk URL which is "pinged" with the event Post request
- **Secure integration constant name**: A Pantheon specific constant which holds a port that is required to build the URL (along with the endpoint) to connect into Splunk
- **Watchdog Severity**: The watchdog severity level value, which is set to log anything between *Info* and *Error* (anything but debug messages)

There is one last variable needed, but no provided by default for the field: **Splunk HTTP Event Collector Token**.

Requirements
------------

[](#requirements)

- Drupal 9
- Existing Pantheon Secure Integration configuration, configured with the IP address and port number of the UT Austin Splunk instance
- Existing Splunk HTTP Event Collector, configured with allow-list of Pantheon IP addresses provided by the Secure Integration configuration.

How to use
----------

[](#how-to-use)

After enabling the module, default config will be set at `admin/config/services/logs-http-client`.

The `Splunk HTTP Event Collector Token`, will need to be uploaded via SFTP (if not provisioned by Jenkins), which can be found in [Stache](https://stache.utexas.edu/) as `Splunk HEC Token PantheonAppLogs`. The new file has to be named `splunk_settings.json`, has to be uploaded into `/files/private/splunk`, and has to have the following format:

```
{
	"splunk_settings":{
		"splunk_hec_token":"[the-token-value]"
	}
}

```

Once this is set, any subsequent watchdog logging shall send logs into Splunk. To verify that the site is logging data correctly, you can go to `admin/config/services/logs-http-client` and look for a message at the top stating if the `Splunk Auth token` was either found or not found. Or, access this [Splunk link](https://splunk.security.utexas.edu/en-US/app/ut_eis1/search?q=search%20index%3Dservice-webpublishing%20source%3Dhttp%3APantheonAppLogs%20request_uri%3D%22https%3A%2F%2Flogs-http-utexas-its2.pantheonsite.io%2F*%22&display.page.search.mode=verbose&dispatch.sample_ratio=1&earliest=0&latest=&sid=1632159770.689754_8220FB8F-01FA-4F7E-929B-F56DE7E31D3B) and replace the `request_uri` parameter with `https://yourpantheonsite.pantheonsite.io/*`. If you get a hit while searching results, the module has beeen configured correctly.

Debugging
---------

[](#debugging)

Using the Logger class to print notices on your watchdog logs is the best way to debug this module's content.

###  Health Score

47

—

FairBetter than 94% of packages

Maintenance65

Regular maintenance activity

Popularity36

Limited adoption so far

Community20

Small or concentrated contributor base

Maturity57

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 88.5% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~156 days

Recently: every ~174 days

Total

9

Last Release

445d ago

Major Versions

1.x-dev → 2.0.02023-04-07

### Community

Maintainers

![](https://avatars.githubusercontent.com/u/4305692?v=4)[Mark Fullmer](/maintainers/markfullmer)[@markfullmer](https://github.com/markfullmer)

![](https://www.gravatar.com/avatar/012956b22ca9b84819eaa90d603bb3dd50236f283dea2ea169268c8dece722c6?d=identicon)[gravelpot](/maintainers/gravelpot)

![](https://www.gravatar.com/avatar/fa3a96320e299ee08a876e9459864ddb48fbb4a5347727a0c4926227b3245677?d=identicon)[pfgutexas](/maintainers/pfgutexas)

![](https://www.gravatar.com/avatar/166b10836b4f6d015d31b89bb2681095e36396a71f383d78424724ef8d7c0fcc?d=identicon)[daddison](/maintainers/daddison)

![](https://www.gravatar.com/avatar/3ecf616f86b11edbdfcceec63369c1857581f853d61cba36a3f3ad398884afa0?d=identicon)[bjc2265](/maintainers/bjc2265)

![](https://www.gravatar.com/avatar/d2507ec4be88334a1832dc32cf225a827c742bed2ea530e7d3af8545cb324ef7?d=identicon)[marcusmarler](/maintainers/marcusmarler)

---

Top Contributors

[![jmf3658](https://avatars.githubusercontent.com/u/34824280?v=4)](https://github.com/jmf3658 "jmf3658 (23 commits)")[![markfullmer](https://avatars.githubusercontent.com/u/4305692?v=4)](https://github.com/markfullmer "markfullmer (3 commits)")

---

Tags

drupal

### Embed Badge

![Health badge](/badges/utexas-utexas-pantheon-logs-http/health.svg)

```
[![Health](https://phpackages.com/badges/utexas-utexas-pantheon-logs-http/health.svg)](https://phpackages.com/packages/utexas-utexas-pantheon-logs-http)
```

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)
